A security audit reveals that a server has an unexpected service listening on port 4444. The administrator needs to determine which package installed this service and whether it is a legitimate package or a potential backdoor. Which sequence of commands would be most effective?

netstat -tlnp | grep 4444, then dpkg -S

ss -tlnp | grep 4444, then rpm -qf

lsof -i :4444, then rpm -qf /proc/ /exe

fuser 4444/tcp, then yum provides

During a security review, an administrator needs to find all files on the system that have the SUID bit set and are owned by root. Which command will accomplish this?

find / -perm -4000 -o -perm -2000

LPI LPIC-1:Linux Administrator (101-500)

Domain 10Objective 1

110.1 Perform Security Administration Tasks LPIC-1 Practice Questions (Page 2)

Part of the Topic 110: Security domain, which makes up ~3% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~1–2 in this domain), expect 1–1 from this objective — we provide 20 practice questions to prepare you well beyond it. (estimate)

20questions here

4free pages

8concepts

Questions 6–10

6foundation · easy
Which command can be used to lock a user account to prevent login?
Select an answer first
7application · medium
A security administrator on a Red Hat-based system needs to verify that the 'openssh-server' package has not been tampered with. Which command should be used to check the integrity of this specific package?
Select an answer first
8foundation · easy
Which command is used to change a user's password?
Select an answer first
9expert · hard
A security audit reveals that a server has an unexpected service listening on port 4444. The administrator needs to determine which package installed this service and whether it is a legitimate package or a potential backdoor. Which sequence of commands would be most effective?
Select an answer first
10application · medium
During a security review, an administrator needs to find all files on the system that have the SUID bit set and are owned by root. Which command will accomplish this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-1

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-1” is a trademark of its owner, used for identification only.

110.1 Perform Security Administration Tasks LPIC-1 Practice Questions (Page 2)

Questions 6–10

Which command can be used to lock a user account to prevent login?

A security administrator on a Red Hat-based system needs to verify that the 'openssh-server' package has not been tampered with. Which command should be used to check the integrity of this specific package?

Which command is used to change a user's password?

A security audit reveals that a server has an unexpected service listening on port 4444. The administrator needs to determine which package installed this service and whether it is a legitimate package or a potential backdoor. Which sequence of commands would be most effective?

During a security review, an administrator needs to find all files on the system that have the SUID bit set and are owned by root. Which command will accomplish this?

Keep studying — Topic 110: Security